home

download4.cdn.koyotesoft.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain download4.cdn.koyotesoft.com is registered by proxy through GODADDY.COM, LLC and was originally registered in December of 2006. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Dallas, Texas within the United States which resides on the Akamai Technologies, Inc. network.
Registrar:
GODADDY.COM, LLC

Server location:
Texas, United States (US)

Create date:
Monday, December 18, 2006

Expires date:
Sunday, December 18, 2016

Updated date:
Sunday, November 1, 2015

ASN:
AS20940 AKAMAI-ASN1 Akamai International B.V.,US

Root domain:
koyotesoft.com

Whois:
2 koyotesoft.com records

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.KoyoteLab.b, PUP.Installer.KoyoteLab.a, PUP.Bandoo.KoyoteLab.Installer (M)
100.00%

Malwarebytes
PUP.Optional.Koyote.A
66.67%

Agnitum Outpost
Riskware.Agent, PUA.Bandoo
66.67%

Dr.Web
Adware.Downware.964, Adware.Bandoo.376
66.67%

G Data
Win32.Application.Searchsuite, Win32.Application.KoyoteLab, NSIS.Application.SearchSuite
66.67%

ESET NOD32
Win32/KoyoteLab (variant), Win32/Toolbar.SearchSuite.W potentially unwanted
66.67%

AVG
SearchSuite, Generic
66.67%

Fortinet FortiGate
Riskware/KoyoteLab
50.00%

McAfee
Artemis!6AF3EF4C4658, Artemis!4FE615945E2D
33.33%

IKARUS anti.virus
PUA.SearchSuite, PUA.Soffer
33.33%

K7 AntiVirus
Unwanted-Program , Adware
33.33%

Avira AntiVirus
Adware/SeaSuite.ona, PUA/SeaSuite.Gen
33.33%

Baidu Antivirus
Adware.Win32.SearchSuite, PUA.Win32.KoyoteLab
33.33%

Trend Micro House Call
Suspicious_GEN.F47V1126
16.67%

Clam AntiVirus
Win.Adware.Searchsuite-3
16.67%

The domain download4.cdn.koyotesoft.com has been seen to resolve to the following 14 IP addresses.

104.96.220.104
a104-96-220-104.deploy.static.akamaitechnologies.com
May 18, 2016

104.96.220.137
a104-96-220-137.deploy.static.akamaitechnologies.com
May 18, 2016

184.51.126.88
a184-51-126-88.deploy.static.akamaitechnologies.com
April 15, 2016

184.51.126.90
a184-51-126-90.deploy.static.akamaitechnologies.com
April 15, 2016

23.15.8.226
a23-15-8-226.deploy.static.akamaitechnologies.com
April 6, 2016

23.15.8.203
a23-15-8-203.deploy.static.akamaitechnologies.com
April 6, 2016

184.51.126.177
a184-51-126-177.deploy.static.akamaitechnologies.com
February 22, 2016

184.51.126.168
a184-51-126-168.deploy.static.akamaitechnologies.com
February 22, 2016

95.100.97.65
a95-100-97-65.deploy.akamaitechnologies.com
May 5, 2015

95.100.97.74
a95-100-97-74.deploy.akamaitechnologies.com
May 5, 2015

96.6.113.18
a96-6-113-18.deploy.akamaitechnologies.com
May 4, 2015

96.6.113.42
a96-6-113-42.deploy.akamaitechnologies.com
May 4, 2015

23.62.6.131
a23-62-6-131.deploy.static.akamaitechnologies.com
December 1, 2014

23.62.6.128
a23-62-6-128.deploy.static.akamaitechnologies.com
December 1, 2014

File downloads found at URLs served by download4.cdn.koyotesoft.com.

1 / 68      (PUP)
http://download4.cdn.koyotesoft.com/cdn/r/.../FreeVideosToDVDSetup-r0-n-bc.exe  (freevideostodvdsetup-r0-n-bf.exe)

1 / 68      (PUP)
http://download4.cdn.koyotesoft.com/cdn/r/.../FreeScreenToVideoSetup-r0-n-bc.exe  (12abb56df45ad14c4e9b69da33992af0)

18 / 68    (PUP)
http://download4.cdn.koyotesoft.com/cdn/r/.../FreeVideoConverterSetup-r211-n-bc.exe  (freevideoconvertersetup-r127-n-bf.exe)

18 / 68    (PUP)
http://download4.cdn.koyotesoft.com/cdn/r/.../FreeVideoConverterSetup-r0-n-bc.exe  (freevideoconvertersetup-r127-n-bf.exe)

8 / 68      (PUP)
http://download4.cdn.koyotesoft.com/cdn/r/.../FreeMp3WmaConverterSetup-r20-n-bc.exe  (freemp3wmaconvertersetup-r0-n-bc.exe)

14 / 68    (PUP)
http://download4.cdn.koyotesoft.com/cdn/r/.../FreeMp3WmaConverterSetup-r27-n-bc.exe  (freemp3wmaconvertersetup-r0-n-bc.exe)

10 / 68    (PUP)
http://download4.cdn.koyotesoft.com/cdn/r/.../FreeVideoConverterSetup-r127-n-bc.exe  (freevideoconvertersetup-r136-n-bc.exe)

The following 606 files have been seen to comunicate with download4.cdn.koyotesoft.com in live environments.

TCP » 184.51.126.88:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 104.96.220.104:80
kometa.exe (Kometa by Kometa Authors)

TCP » 184.51.126.90:443
kometa.exe (Kometa by Kometa Authors)

TCP » 184.51.126.90:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.88:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.90:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.90:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.88:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 104.96.220.137:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 104.96.220.104:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.90:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 104.96.220.137:443
browser.exe (Browser)

TCP » 184.51.126.177:80
plugincontainer.exe

TCP » 184.51.126.88:443
messengertime.exe

TCP » 184.51.126.90:443
8dda4b771a8b9ff7908171c045da8d64.exe

TCP » 184.51.126.90:443
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 184.51.126.88:443
lavasofttcpservice.exe (LavasoftTcpService.exe by Lavasoft Limited)

TCP » 184.51.126.90:80
dailywiki.exe

TCP » 184.51.126.90:80
apptrailers.exe

TCP » 23.15.8.226:80
updateframeddisplay.exe

 
Latest 20 of 636 files

URL:
http://download4.cdn.koyotesoft.com/

Web server:
AkamaiGHost

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.